-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Thu, 20 Mar 2025 13:56:44 +0100 Source: mercurial Binary: mercurial mercurial-dbgsym Architecture: ppc64el Version: 6.3.2-1+deb12u1 Distribution: bookworm-security Urgency: high Maintainer: ppc64el Build Daemon (ppc64el-osuosl-02) Changed-By: Julien Cristau Description: mercurial - easy-to-use, scalable distributed version control system Closes: 1100899 Changes: mercurial (6.3.2-1+deb12u1) bookworm-security; urgency=high . * CVE-2025-2361: reflected XSS in hgweb (closes: #1100899) * patchbomb: don't test ambiguous address (fixes FTBFS after python's fix for CVE-2023-27043). Checksums-Sha1: c2c75bc828fbfeed82d29e131cd95cc59eeeac68 1666304 mercurial-dbgsym_6.3.2-1+deb12u1_ppc64el.deb 7fa526ab7ad2a8950dd8a76f6c9c4b04db9c5d89 7459 mercurial_6.3.2-1+deb12u1_ppc64el-buildd.buildinfo 270ef83562d156455bc89ee34951ac456f7c462d 367656 mercurial_6.3.2-1+deb12u1_ppc64el.deb Checksums-Sha256: eafd9074d42a43717cbd7edbd95df6335203cff28854e1989fb1b52d21668b4c 1666304 mercurial-dbgsym_6.3.2-1+deb12u1_ppc64el.deb cbaf0d23100facac8c125a8045bbb868a121175fb788c32de8ca16017b6c117e 7459 mercurial_6.3.2-1+deb12u1_ppc64el-buildd.buildinfo ca53993a2c5c0bf9e90efb67167bf2af553dada3556de95554998340c49626ab 367656 mercurial_6.3.2-1+deb12u1_ppc64el.deb Files: 30a4e6765fe4892dc6ab6a63e2debafd 1666304 debug optional mercurial-dbgsym_6.3.2-1+deb12u1_ppc64el.deb fe1c597239ce92bc767cfe010456eb27 7459 vcs optional mercurial_6.3.2-1+deb12u1_ppc64el-buildd.buildinfo e87ea2d1f25bc55608067b505515cb2f 367656 vcs optional mercurial_6.3.2-1+deb12u1_ppc64el.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0YcVZfZCWQv84jpRNcqbeolus3sFAmfcSvcACgkQNcqbeolu s3ts2Q//cH6uHjMzGpuR+QvOuiSXCvpAshlYrv6SNvZTqhvDhmrP9Ks8tQAK0pPR pSdV+24XGCMLc3GmDoDLdefEIdTeTKkiNY+ujZ1M2VEiAOIQf9b5iZmmgLXG7oap 3K1RDR6JtCZf+1c0yJujuZG7EF+uD0zTH2JWNx7ZwxxBMgCs5ay3MHG1F6AKh8pO iB41swWMVicZdW9zcZpidukQWew2uZSjLEzrjTIQViGXKRAf3LyBL6bamSeheNiz ujtx5mLlogXsVkMrIbKDhrxtHXvGQGqo5UCFkPEALcYwurOcynNZfmBq6VoVEHNr zHbzJvxqFezQP8Lt3jDmiTFPYVnqhNabRX8lm2szITGcj63934Wh8xUW2EJoKFBx YT6d3o7C75hKwo6F8/czd5tzdjpq+2EV9S4KKpGpMErGs0rRXWMsrmXVetZh2R4i rlixdKQDypmmt5WIka4665heGi+eLKTfssahsgeiSeO+fnAbv7GRqV2Nky5szQvr n33XtZWIXyl38ZyEgsRIRUK84TkRK8xU3fCm/X5kANwLLy5khAeNYeE6RRjileg0 qhec7HJ1l96XiOJCjVS6HAnRyQvmCsVjHqOcxDbeFjQivez7YLPKjByX2QL40O7u KBvpjh+FMUR9yEhChmAV28bx/1hRl69dQzXwdWZL5pb3ux0Vs78= =pkx+ -----END PGP SIGNATURE-----